Senior Cyber Security Engineer (Apps) | EMEA
Colliers
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
Qualifications
- 5–8+ years of experience in cloud applications or cybersecurity.
- Hands-on experience with whitebox, greybox, and blackbox assessments.
- Experience working with various IT teams and non-IT teams.
Responsibilities
- Perform security reviews to ensure compliance with security baselines.
- Support architecture team with threat modelling and security controls.
- Identify and resolve security vulnerabilities across applications.
Skills
Education
Tools
Job description
Colliers is a leading diversified professional services company. With operations in 70 countries, our more than 24,000 enterprising people work collaboratively to provide expert advice to maximize the value of property for real estate occupiers, owners, and investors.
As a global leading real estate firm, Colliers is redefining workplace strategy worldwide, helping organisations rethink where they work, how much space they need, and how their workplaces should function in an increasingly complex, hybrid, and sustainability‑driven landscape.
The Senior Cyber Security Engineer will work closely with IT and business teams to review existing and new applications and make sure application security are aligned with security best practices. This role is also responsible to define and ensure security requirements are implemented on any IaaS, PaaS or on‑prem infrastructure and to identify risks within SaaS platforms that could impact the confidentiality, integrity, and availability of information assets. As a Senior Cyber Security Engineer, you will be hands‑on and have wide‑ranging opportunities to shape and support the security of Colliers.
- Product security reviews. You will perform security reviews on new and existing applications to ensure that all security requirements are implemented and that each application aligns with the organization’s established security baselines. Periodically, you will review and update the security baselines in line with evolving threats, industry standards, and organizational needs.
- Architecture and design. You will support the architecture team with threat modelling, assess risks, and help implement security controls and/or mitigations to address identified risks. You will directly steer the implementation of key applications to ensure we are secure‑by‑design.
- Establish security principles, policies, and governance processes, including design and implementation of the secure development life‑cycle framework and related processes in conjunction with Governance, Risk and Compliance teams. You will embed security into all phases of the product lifecycle—from early discovery and threat modelling to design reviews and secure delivery, and ongoing monitoring and testing post‑release.
- Vulnerability identification and analysis. You will be responsible for finding new and novel ways to identify and resolve security vulnerabilities. This includes static and dynamic code analysis, security scanning, investigation of security reports from InfoSec, or other trusted partners, and direct work with our incident response team on application security issues and incidents. You will define scope and oversee applications pentest.
- Perform deep architecture and security reviews on applications (cloud and on‑prem) to identify vulnerabilities.
- Design application security requirements, perform threat modelling and manage application pentests.
- Support decision‑making by determining the trade‑offs between security and business requirements.
- Lead implementation of strategic security initiatives that improve security across Colliers.
- Bachelor’s degree in computer science, cybersecurity, or a related field (or equivalent experience).
- 5–8+ years of experience in cloud applications, cybersecurity, or related domains.
- Strong experience performing threat modelling and security reviews.
- Hands‑on experience on whitebox, greybox, and blackbox assessments or oversight of application pen tests focusing on OWASP.
- Strong documentation skills.
- Experience working with various IT teams and non‑IT teams across disciplines.
- Ability to assimilate complex technical challenges and provide appropriate security advice that delivers the right business outcomes.
- Relevant certifications: CISSP, CCSP, or equivalent.
- Expert knowledge of zero trust, identity, threat detection, and threat modelling and security practices.
- Self‑motivated, experience in solving complex problems.
- Strong communication and collaboration skills and comfortable working closely with Architecture and Infrastructure teams.
- Ability to learn and apply new technologies quickly and in complex deployments.
- Remote work in Poland.
- Contract of employment.
- International environment, working in English.
- Private healthcare with rehabilitation, 6 additional days off yearly for parents, cafeteria programme and other benefits.
- Internal training program.
- Job in a company that cares about the sustainable development of the organization.
- Working in a company with the titles: Best Employer 2017 and 2019 awarded by Kincentric (formerly AON) and Investor in Human Capital 2019, 2021, 2022, 2023, 2024 and 2025.
Check our Warsaw Newffice | Colliers
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
